Anthropic Alleges Industrial-Scale Claude Distillation by Chinese AI Labs
Emerging Technology Risk · 9 sources · Updated 4mo ago · First seen Feb 23, 2026

Anthropic reported detecting “industrial-scale” distillation activity targeting its Claude models and attributed it to three Chinese AI labs: DeepSeek, Moonshot, and MiniMax. Anthropic said the actors used ~24,000 fraudulent accounts and generated ~16 million exchanges with Claude, allegedly leveraging proxy/reseller access to evade controls and violate terms of service and regional restrictions. The company characterized the activity as deliberate capability extraction rather than normal customer usage, and paired the disclosure with renewed calls for stronger export controls.
Anthropic warned that models produced via illicit distillation may lack safety guardrails and could be repurposed for national security-relevant misuse, including offensive cyber operations, surveillance, and disinformation. Reporting described tactics including coordinated fake-account networks (“hydra clusters”), proxy services, and prompt patterns aimed at extracting advanced reasoning and other capabilities at scale; one breakdown cited DeepSeek activity at 150,000+ exchanges and Moonshot at 3.4M+ exchanges, alongside prompt engineering intended to elicit step-by-step reasoning. Separate coverage on training-data memorization/copyright and a vendor blog on AI-driven crypto fraud discuss broader AI risk trends but do not address Anthropic’s specific distillation allegations.


